Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
MIME-Version: 1.0
In-Reply-To: <CACT4Y+bnUNtn3jO5fYMB5dSqA=vbc8KfnTmbajA6SYKex4KFoQ@mail.gmail.com>
References: <883d24f79ad8fd475f0569a39ba6@google.com> <00000000000037b58a0569c49b70@google.com>
 <CACT4Y+bnUNtn3jO5fYMB5dSqA=vbc8KfnTmbajA6SYKex4KFoQ@mail.gmail.com>
From:   Jim Mattson <jmattson@google.com>
Date:   Thu, 28 Jun 2018 10:18:34 -0700
Message-ID: <CALMp9eSDP3XRMU-ZvSPRqgyQrtOCajz90HyQ8GM7Mg2oNuBAHw@mail.gmail.com>
Subject: Re: general protection fault in vmx_vcpu_run
To:     Dmitry Vyukov <dvyukov@google.com>
Cc:     syzbot <syzbot+cc483201a3c6436d3550@syzkaller.appspotmail.com>,
        "H. Peter Anvin" <hpa@zytor.com>, KVM list <kvm@vger.kernel.org>,
        LKML <linux-kernel@vger.kernel.org>,
        Ingo Molnar <mingo@redhat.com>,
        Paolo Bonzini <pbonzini@redhat.com>,
        =?UTF-8?B?UmFkaW0gS3LEjW3DocWZ?= <rkrcmar@redhat.com>,
        syzkaller-bugs <syzkaller-bugs@googlegroups.com>,
        Thomas Gleixner <tglx@linutronix.de>,
        "the arch/x86 maintainers" <x86@kernel.org>
Content-Type: text/plain; charset="UTF-8"
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

  22: 0f 01 c3              vmresume
  25: 48 89 4c 24 08        mov    %rcx,0x8(%rsp)
  2a: 59                    pop    %rcx

<rip>:
  2b: 0f 96 81 88 56 00 00 setbe  0x5688(%rcx)
  32: 48 89 81 00 03 00 00 mov    %rax,0x300(%rcx)
  39: 48 89 99 18 03 00 00 mov    %rbx,0x318(%rcx)

%rcx should be pointing to the vcpu_vmx structure, but it's not even
canonical: 1ffff10035842e78.